← Back

Webtareas

webtareas

Vendor: Webtareas Project • 27 CVEs

CVEs (27)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-41916
1Webtareas Project
1Webtareas
Nov 21, 2024
Oct 8, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a remote attacker to create a new administrative profile and add a new user to the new profile. without the victim's knowledge...Show more
A Cross-Site Request Forgery (CSRF) vulnerability in webTareas version 2.4 and earlier allows a remote attacker to create a new administrative profile and add a new user to the new profile. without the victim's knowledge, by enticing an authenticated admin user to visit an attacker's web page.Show less
CVE-2020-23069
1Webtareas Project
1Webtareas
Nov 21, 2024
Aug 18, 2021
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files.
CVE-2020-25735
1Webtareas Project
1Webtareas
Nov 21, 2024
Sep 18, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement.php, administration/departments.php, administration/locations.php, expenses/claim_type.php, project...Show more
webTareas through 2.1 allows XSS in clients/editclient.php, extensions/addextension.php, administration/add_announcement.php, administration/departments.php, administration/locations.php, expenses/claim_type.php, projects/editproject.php, and general/newnotifications.php.Show less
CVE-2020-25734
1Webtareas Project
1Webtareas
Nov 21, 2024
Sep 18, 2020
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
webTareas through 2.1 allows files/Default/ Directory Listing.
CVE-2020-25733
1Webtareas Project
1Webtareas
Nov 21, 2024
Sep 18, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.
CVE-2020-23660
1Webtareas Project
1Webtareas
Nov 21, 2024
Aug 26, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
webTareas v2.1 is affected by Cross Site Scripting (XSS) on "Search."
CVE-2020-14973
1Webtareas Project
1Webtareas
Nov 21, 2024
Jun 22, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The loginForm within the general/login.php webpage in webTareas 2.0p8 suffers from a Reflected Cross Site Scripting (XSS) vulnerability via the query string.